Events "A successful windows domain account logon by computer$"

Copper Contributor

Hi,

We see many events "A successful windows domain account logon by computer$" in "Timeline" of "Devices", from "Microsoft365 Defender" portal (https://security.microsoft.com/) .

We don't understand these events because the "logon by" is attributed to computer accounts of our AD (and not to "user accounts").

Could you please tell us these events meaning?

Regards,
Christophe

 

christophebarre_0-1678342416887.png

 

1 Reply
The OS uses an account to access resources just like the user does, and generates logon events when it does just like the user.